Cloud Security Engineer

This team is part of Pega’s Cloud Cybersecurity organization within the Cloud Cybersecurity Operations tribe. We build the AI-driven automation, tooling, and response capabilities that protect Pega’s cloud environments, including FedRAMP-regulated government infrastructure, commercial AWS, and multi-cloud platforms. Our work spans AI-assisted remediation, identity automation, compliance tooling, and SOAR response actions. Engineers on this team pair modern AI tooling with hands-on cloud security to move fast and ship real automation.

Due to the nature of the role's work with FedRamp, US Citizenship is required. This role is based out of our Dulles (Washington DC) office

This is an AI-first engineering role for someone early in their career who wants to build. You’ll spend the majority of your time developing AI-driven security automation, remediation pipelines, identity workflows, and intake tooling, all while gaining hands-on operational experience supporting Pega’s PCFG (FedRAMP Government) and Commercial cloud environments. You’ll learn alongside senior engineers, contribute to feature delivery from day one, and grow your cloud security operations foundation as you go.

You write code, use AI tools to accelerate how you build, and validate what you ship. Ops experience is a plus that you’ll deepen here , AI and automation skills are what we’re optimizing for.

Build and iterate on AI-assisted remediation features — SOAR response actions, AWS Config automation, and AI intake tooling — alongside senior engineers

Use AI tools (Copilot, ChatGPT, or similar) to scaffold automation, generate test cases, and accelerate repetitive engineering work, then validate the output before it ships

Develop automation in Python and shell to reduce manual security operations toil

Contribute to AI-assisted certification and access-review automation to streamline identity workflows

Help prototype and improve internal tooling that applies AI to triage, enrich, and route security findings

Build and maintain entitlement automation workflows for joiner/mover/leaver processes

Support Okta administration for PCFG and Commercial environments: MFA resets, account provisioning, and Okta Verify troubleshooting

Assist with IAM roles, permission boundaries, and access reviews across PCFG accounts, learning the environment as you automate it

Support SailPoint quarterly certifications and access request workflows

Support vulnerability scanning with Nessus/Tenable, Netsparker, or AWS Inspector and help track findings to closure

Help respond to audit scan requests (SOC, FedRAMP assessors) by gathering findings and evidence

Assist with FedRAMP compliance patching cycles and contribute to SSM Patch Manager automation to reduce manual overhead over time

Learn what compliance-driven delivery looks like in a regulated environment

Contribute to infrastructure automation: CloudFormation role deployment, account lifecycle, and SSM alerting

Respond to ad-hoc infrastructure requests: IAM policy changes, Lambda roles, and Bedrock model enablement

Treat infrastructure and security content as code — use PR-gated workflows and GitHub Actions

2–3 years of experience in software/automation engineering, cloud security, or a closely adjacent role — and you’re eager to grow your operations depth

AI-first builder: you use AI tools (Copilot, ChatGPT, or similar) as part of how you build — scaffolding automation, generating test cases, accelerating repetitive work — and you know how to validate what comes out

Comfortable writing automation: Python and shell; exposure to CloudFormation or Terraform is a plus

Working knowledge of AWS fundamentals (IAM, CloudFormation, and services like SSM, Inspector, Config, or GuardDuty) — depth is a plus, appetite to learn is required

Familiar with GitHub-based workflows: comfortable with PR-gated reviews and GitHub Actions, and treating infrastructure and security content as code

Some operational exposure to identity platforms (Okta, SailPoint, or equivalent) or vulnerability scanning tools is a plus — you’ll build depth here

Curious about regulated environments: prior FedRAMP or compliance-driven experience is a bonus, not a requirement

Exposure to SOAR platforms (Chronicle SecOps, Siemplify, or similar) is a plus

You thrive on learning: you context-switch between building new automation and supporting operational work, and you ask good questions rather than waiting to be told

Gartner Analyst acclaimed technology leadership across our categories of products

Continuous learning and development opportunities

An innovative, inclusive, agile, flexible, and fun work environment

Competitive global benefits program inclusive of pay + bonus incentive, employee equity in the company (#LI-KH2)

Base salary range for this role is 86,700 - 129,600 USD annually. This role may also be eligible for annual bonus OR commission, as well as benefits and other incentives.

The final compensation will be determined during the offer process based on the candidate's education, experience, skills, and qualifications, as well as market conditions and may vary from the posted range. We will share an information on benefits, bonus/commission, and other pay components for this role at the relevant recruitment stage.

AI in Action – Responsible Use of AI in Recruitment Pega embraces the responsible use of artificial intelligence (AI) to improve efficiency, consistency, and fairness across our business. We encourage thoughtful and ethical adoption of AI technologies that support people—not replace them. We may use AI‑enabled tools in our recruitment process. These tools are designed to assist us by providing insights and operational support.

All hiring decisions are made based on human review and judgment. You may have the right to request human review, provide additional information, or raise questions about how such tools are used.

Culture At Pegasystems, we foster an environment where people feel valued and empowered to contribute their best. With global clients across industries and regions, we know our success depends on the unique perspectives, experiences, and talents of our people. Ours is a workplace where everyone can grow, collaborate, and deliver meaningful outcomes.

We encourage candidates from all backgrounds and experiences and focus on the core competencies and mindset needed to thrive in a role.

As an Equal Opportunity employer, Pegasystems will not discriminate in its employment practices due to an applicant's race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, veteran or disability status, or any other category protected by law.

This same mindset shapes how we work, encouraging curiosity, continuous learning, and smarter ways of working with AI. At Pegasystems, we believe the best ideas come from curious people who embrace change, learn continuously, and use AI to work smarter and move faster. Guided by our values, we bring a growth mindset to every challenge and create lasting impact together.

Export Compliance For positions requiring access to technical data subject to export control regulations such as this, Pegasystems may need to obtain export license approval from the U.S. Government and EU Authorities for certain individuals.

Accommodations If you require reasonable accommodations under the Americans with Disabilities Act (US only) or comparable regional regulations in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please contact us here or contact (US only) 1-888-PEGA-NOW and/or 225 Wyman Street Waltham, MA 02451 ATTN: Benefits.

Labor Condition Applications Pegasystems Limited UK Gender Pay Gap Statement EEO/AA Policy Statement Your Employee Rights Under the Family and Medical Leave Act E-Verify Notice Employee Polygraph Protection Act Rights

Privacy Notices U.S. Biometric Privacy Notice California (CCPA) EU, UK, Switzerland (GDPR) ANZ, Singapore, Hong Kong & Japan Brazil (LGDP)